Description
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
Remediation
References
Related Vulnerabilities
IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-29701)
WordPress Plugin WordPress Access Areas Security Bypass (1.3.0)
WordPress Plugin JS Job Manager Security Bypass (1.1.8)
MySQL CVE-2015-0505 Vulnerability (CVE-2015-0505)
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2026-33169)